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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the 

application: 
Listing of Claims: 

1 . (Currently Amended) A method comprising the steps of: 
retrieving a certificate and a r eal time status for [[a]] the certificate from a 

certificate authority ; 

storing the certificate and said real time status in an identity system, wherein the 
certificate authority is external to the identity system ; 

storing validation information for said certificate in the identity system , wherein 
said validation information includes an identifier of a time said real time status was retrieved and 
a validation interval for said real time status; 

receiving at the identity system a request to export the certificate; 

determinin g with the identity system whether to check a status for said certificate^ 
wherein determining whether to check the status for the certificate comprises querying a 
parameter field in the identity system ; and 

in response to determining to check the status for said certificate, determining 
with the identity system whether to check the status for the certificate in real time , wherein 
determining whether to check the status for the certificate in real time comprises querying a 
parameter field in the identity system . 

2. (Previously Presented) The method of claim 1, wherein storing validation 
information for said certificate comprises: 

setting said validation interval to zero when said real time status is not valid. 
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3. (Canceled) 

4. (Currently Amended) The method of claim 1, further comprising, in 
response to determining to check the status of the certificate and determining to not check the 
status for the certificate in real time, 

determinin g with the identity system whether said request is received within a 
time period, wherein said time period begins at said time said real time status was retrieved and 
extends for said validation interval. 

5. (Canceled) 

6. (Currently Amended) The method of claim 4, further comprising: 
exporting said certificate from the identity system , if said request is received 

within said time period. 

7. (Currently Amended) The method of claim 4, further comprising: 
issuing an error message from the identity system , if said request is not received 

within said time period. 

8. (Currently Amended) The method of claim 1, further comprising 
retrieving a new real time status for said certificate from the identity system in 

response to determining to check status for said certificate in real time. 

9. (Currently Amended) The method of claim 8, further comprising 
exporting said certificate from the identity system , if said new real time status 

indicates said certificate is valid. 

10. (Currently Amended) The method of claim 8, further comprising 
issuing an error message from the identity system , if said new real time status 

indicates said certificate is not valid. 
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1 1 . (Previously Presented) The method of claim 1 , further comprising: 
receiving a request to display information from said certificate; 
retrieving a status for said certificate; and 

displaying said information from said certificate and said status. 

12. (Canceled) 

13. (Currently Amended) The method of claim 11, wherein retrieving a status 
for said certificate comprises: 

determinin g with the identity system whether to check status for said certificate in 

real time; 

retrieving said real time status for said certificate from the validation information 
to serve as said status, if it is determined to not check status in real time; and 

retrieving a new real time status from the certificate authority to serve as said 
status, if it is determined to check status in real time. 



14-19. (Canceled) 

20. (Currently Amended) One or more processor readable storage devices 
having processor readable code embodied on said one or more processor readable storage 
devices, said processor readable code for programming one or more processors to perform a 
method comprising the steps of: 

retrieving a certificate and a r eal time status for [[a]] the certificate from a 
certificate authority ; 

storing the certificate and said real time status in an identity system, wherein the 
certificate authority is external to the identity system ; 

storing validation information for said certificate in the identity system , wherein 
said validation information includes an identifier of a time said real time status was retrieved and 
a validation interval for said real time status; 

receiving at the identity system a request to export the certificate; 
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determinin g with the identity system whether to check a status for said certificate^ 
wherein determining whether to check the status for the certificate comprises querying a 
parameter field in the identity system ; and 

in response to determining to check the status for said certificate, determining 
with the identity system whether to check the status for the certificate in real time , wherein 
determining whether to check the status for the certificate in real time comprises querying a 
parameter field in the identity system . 

21 . (Previously Presented) One or more processor readable storage devices 
according to claim 20, wherein storing validation information for said certificate comprises: 

setting said validation interval to zero when said real time status is not valid. 

22. (Canceled) 

23. (Currently Amended) One or more processor readable storage devices 
according to claim 20, further comprising, in response to determining to check the status of the 
certificate and determining to not check the status for the certificate in real time, 

determinin g with the identity system whether said request is received within a 
time period, wherein said time period begins at said time said real time status was retrieved and 
extends for said validation interval. 

24. (Canceled) 

25. (Currently Amended) One or more processor readable storage devices 
according to claim 23, further comprising: 

exporting said certificate from the identity system , if said request is received 
within said time period. 

26. (Currently Amended) One or more processor readable storage devices 
according to claim 23, further comprising: 
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issuing an error message from the identity system , if said request is not received 
within said time period. 

27. (Previously Presented) One or more processor readable storage devices 
according to claim 20, further comprising: 

receiving a request to display information from said certificate; 

retrieving a status for said certificate; and 

displaying said information from said certificate and said status. 

28-41. (Canceled) 

42. (Currently Amended) A method comprising: 

retrieving a certificate and a real time status for [[a]] the certificate from a 
certificate authority ; 

storing the certificate and the real time status in an identity system, wherein the 
certificate authority is external to the identity system ; 

storing validation information for the certificate in the identity system , wherein 
the validation information includes an identifier of a time the real time status was retrieved and a 
validation interval for the real time status; 

receiving at the identity system a request to export the certificate; 

determinin g with the identity system whether to check a status for the certificate; 

in response to determining to not check the status for the certificate, exporting the 
certificate from the identity system without checking the status for the certificate; 

in response to determining to check the status for the certificate, determinin g with 
the identity system whether to check the status for the certificate in real time; and 

in response to determining to check the status for the certificate in real time, 
retrieving a new real time status for the certificate from the certificate authority . 
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43. 



(Currently Amended) The method of claim 42, further comprising 



exporting the certificate from the identity system if the new real time status indicates the 
certificate is valid. 

44. (Currently Amended) The method of claim 42, further comprising issuing 
an error message from the identity system if the new real time status indicates the certificate is 
not valid. 



response to determining to not check the status for the certificate in real time, determining with 
the identity system whether the check time falls within a time period, wherein the time period 
begins at the time the real time status was received and extends for the validation interval. 

46. (Previously Presented) The method of claim 45, further comprising 
exporting the certificate if the check time falls within the time period. 

47. (Currently Amended) The method of claim 45, further comprising issuing 
an error message from the identity system if the check time does not fall within the time period. 

48. (Currently Amended) The method of claim 42, wherein determining 
whether to check a status for the certificate comprises querying a parameter field in an the 
identity system. 

49. (Currently Amended) The method of claim 42 wherein determining 
whether to check the status for the certificate in real time comprises querying a parameter field in 

the identity system. 

50. (Currently Amended) One or more processor readable storage devices 
having processor readable code embodied on said one or more processor readable storage 



45. 



(Currently Amended) The method of claim 42, further comprising, in 
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devices, said processor readable code for programming one or more processors to perform a 
method comprising: 

retrieving a certificate and a real time status for [[a]] the certificate from a 
certificate authority ; 

storing the certificate and the real time status in an identity system, wherein the 
certificate authority is external to the identity system ; 

storing validation information for the certificate in the identity system , wherein 
the validation information includes an identifier of a time the real time status was retrieved and a 
validation interval for the real time status; 

receiving at the identity system a request to export the certificate; 

determinin g with the identity system whether to check a status for the certificate; 

in response to determining to not check the status for the certificate, exporting the 
certificate from the identity system without checking the status for the certificate; 

in response to determining to check the status for the certificate, determinin g with 
the identity system whether to check the status for the certificate in real time; and 

in response to determining to check the status for the certificate in real time, 
retrieving a new real time status for the certificate from the certificate authority . 

5 1 . (Currently Amended) The one or more processor readable storage devices 
of claim 50, further comprising exporting the certificate from the identity system if the new real 
time status indicates the certificate is valid. 

52. (Currently Amended) The one or more processor readable storage devices 
of claim 50, further comprising issuing an error message from the identity system if the new real 
time status indicates the certificate is not valid. 

53. (Currently Amended) The one or more processor readable storage devices 
of claim 50, further comprising, in response to determining to not check the status for the 
certificate in real time, determinin g with the identity system whether the check time falls within a 
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time period, wherein the time period begins at the time the real time status was received and 
extends for the validation interval. 

54. (Currently Amended) The one or more processor readable storage devices 
of claim 53, further comprising exporting the certificate from the identity system if the check 
time falls within the time period. 

55. (Currently Amended) The one or more processor readable storage devices 
of claim 53, further comprising issuing an error message from the identity system if the check 
time does not fall within the time period. 

56. (Currently Amended) The one or more processor readable storage devices 
of claim 50, wherein determining whether to check a status for the certificate comprises querying 
a parameter field in an the identity system. 

57. (Currently Amended) The one or more processor readable storage devices 
of claim 50, wherein determining whether to check the status for the certificate in real time 
comprises querying a parameter field in an the identity system. 
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